setup streams (open/pulls/closed) and more work on BasicAuth